CVE-2026-48905mediumCWE-79

CVE-2026-48905: medium-severity vulnerability in Joomla! Framework Filter package

Joomla! Framework - [20260520] - Inadequate content filtering within the cleanAttributes filter code.

Published · Updated

Follow this CVE+ Monitor Joomla! Framework Filter package

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.1%
Lack of input filtering leads to an XSS vector in the HTML filter code.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
Joomla! Project · Joomla! Framework Filter package
Related CVEs — Joomla! Framework Filter package

In the same product, most dangerous first.

CVE-2026-92231HIGHJoomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3EPSS 0.3%CVE-2026-92232HIGHJoomla! Core - [20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3EPSS 0.2%CVE-2026-48903MEDIUMJoomla! Framework - [20260519] - Inadequate content filtering within the checkAttribute filter code.EPSS 0.1%